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OVERSPEED LBVnTER FOR TUKBOSHAFT ENGB>JES 
CROSS REFERENCE TO RELATED APPLICATIONS 

[0001] This application claims priority to U.S. Provisional Patent Application 
Serial No. 60/576,779, filed June 3, 2004, the disclosure of which is herem 
incorporated by reference in its entirety. 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

[0002] The subject invention is directed to control systems for gas turbme 
engines, and more particularly, to power turbine overspeed Ikniters for turboshaft 
engines used in helicopters. 

2. Background of the Related Art 

[0003] Overspeed limiters for gas tuibine engines are known in the prior art 

The function of an overspeed limiter is to prevent the occurrence of excessive turbine 
speeds by limiting fuel flow to the engine. Examples of prior art overspeed limiters are 
described in U.S. Patent No. 4,302,931 to White et al and U.S. Patent No. 4578,945 to 
Peck et al., the disclosures of which are herein incorporated by reference in their 
entireties. 

[0004] Turboshaft engines installed on helicopters require a unique power 

turbine overspeed limiter. It needs to protect the engine agamst a loss of load and 
potential power turbme overspeed, and preclude false overspeed limiter trips. False 
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limiter Irips significantly reduce engine power, and can occur when a pilot is flying the 
helicopter aggressively. 

[0005] In the past, these requirements have been addressed by providing 
overspeed limiters that do not completely shutdown the engine when an overspeed 
condition is detected, but instead trip to a mmimum fiiel flow condition. Other prior art 
systems shutdown the engine when an overspeed condition is detected, and tiien restart 
the engine using an auto-relight feature. 

[0006] hi modem low mertia gas turbines, mmimum fuel flow systems are not 
capable of contaming loss-of-load power tuibme overspeeds at high altitude, because 
tiie horsepower requirements are too significant. Auto-relight systems are not 
guaranteed to restart an engine under all operating conditions, especially when tiie 
primary engine control system has Med and tiie engme is op»ating witii a sunple 
manual backup control. 

[0007] Accordingly, tiiere is a need in tiie art for an overspeed Umiter for a 

. turboshaft engine tiiat is capable of effectively handling power turbme overspeeds at 
both high and low altitude. 
SUMMARY TRTC INVENTION 

[0008] The subject invention is dhected to a control system for a turboshaft 
engme utilized m a helicopter whidi mdudes means for providmg mimmum fuel flow 
to tiie engine when an overspeed condition is detected at a relatively low altitude (e.g., 
below 10,000 feet), and means for shutting off fuel flow to tiie engme, and tiius shutting 
down tiie engine, when an overspeed, loss of load condition is detected at a relatively 
high altitude (e.g. above 10,000 feet), provided tiiat tiie overspeed, loss of load 
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condition is detected along two different engine speed signal paths, including a 
derivative path and a non-derivative path, 

[0009] The subject mvention is also directed to a control system for a turboshaft 
engme which provides a desired minimum fuel flow to the engine when an overspeed 
condition is detected and when tiie engme is operating in a first operating range and 
shuts off &el flow to the engine when an overspeed condition is detected and the 
engine is operatmg in a second operating range. It is presently envisioned that an 
overspeed condition is detected based on at least one of, for example, a power turbine 
speed signal, a gas generator speed signal and mam rotor speed signal. 
[00010] Preferably, in the first operating range the engine is operating at a 
relatively low altitude and m the second operating range the engine is operatmg at a 
relatively high altitude. In a representative system, the relatively low altitude includes 
0 to 10,000 feet above sea level and the relatively high altitude exceeds 10,000 feet 
above sea level, for example. 

[0001 1] In a preferred embodunent, an overspeed condition is detected along two 
diflferent control logic paths, a first logic path which includes derivative and non- 
derivative control logic and a second logic pafli which mcludes non-derivative logic 
(e.g. proportional logic). 

[0001 2] It is envisioned that the control system furflier includes a hardware latch 
having reset logic associated therewith. Additionally, the control system can include 
software test interfeces for testing the performance of the control system. 
[0001 3] In a representative embodiment, a minimum fuel flow is provided to the 
engine when an overspeed condition is detected through a first solenoid valve and tiie 
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fuel flow to the engine is shut off when an overspeed condition is detected by a second 
solenoid valve. 

[00014] In prefeired embodiments the control system is a dual channel system 
having an interchannel communication means for ensuring that a feult in one channel of 
flie system will not shut down the control system or impact the systems ability to limit 
engine overspeed. 

[p001 B\ Hie present invention is also directed to a control qrstem for a turboshafl 
engine which includes a mechanism for shutting off fuel flow to the engine when an 
overspeed condition is detected, wherein the overspeed condition is detected by first 
and second control logic paths. It is envisioned that the first control logic path includes 
a derivative path and a non-derivative path and the second control logic path includes a 
non-derivative path. Preferably, the control system inchides a device for disabling the 
fiiel shut-off mechanism when the engine is operating below an altitude of 10,000 feet. 
[00016] nie present disclosure is also directed to a control system for a 
turboshaft engine which includes a mechanism for providing a minimum fuel flow to 
the engme when an overspeed condition is detected m a first operating range; and a 
mechanism for shutting off fuel flow to the engine when an overspeed condition is 
detected m a second operating range. It is preferred that the overspeed condition is 
detected along two different engme speed signal paths, mduding a derivative path and 
a non-derivative pafli. 

[00017] Preferably, in the first operating range the engine is operating at a 
relatively low altitude and m the second operating range the engine is operating at a 
relatively high altitude. In a representative system, the relatively low altitude includes 
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0 to 10,000 feet above sea level and the relatively high altitude exceeds 10,000 feet 
above sea level, for example. 

[00018] In a preferred embodiment, an overspeed condition is detected along two 
different control logic paths, a first logic path which includes derivative and non- 
derivative control logic and a second logic path which includes non-derivative logic 
(e.g. proportional logic). 

[00019] It is envisioned that the control system further mcludes a hardware latch 
having reset logic associated therewtth. Additionally, the control system can include 
software test interfaces for testing the performance of the control system. 

[00020] In a representative embodiment, a minimum fiiel flow is provided to the 
engme when an overspeed condition is detected through a first solenoid valve and the 
fuel flow to the engine is shut off when an overspeed condition is detected by a second 
solenoid valve. 

[00021] In preferred embodiments the control system is a dual channel system 
havmg an interchannel communication means for ensuring that a fault hi one channel of 
the system will not shut down the control system or unpact the systems ability to lunit 
engine overspeed. 

[00022] The present disclosure is also directed to a method for limiting 
turboshaft engme overspeed that mcludes measuring at least one enguie speed 
parameter; sensmg the altitude at which tiie engine is operatmg and determining 
whetiier an overspeed condition exists based on the measured speed parameter. The 
disclosed method uses a control system which mcludes a first logic path that has 
derivative and non-derivative control logic and a second logic path that has non- 
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derivative logic. The inventive metiiod also includes the steps of providing a desired 
minimum &el flow to the engine when an overspeed condition is detected by the 
engine control system when the engme is operating in a &st altitude range; and 
shutting off fuel flow to the engine when an overspeed condition is detected by the 
engine control system and the engine is operating in a second operating range. 

[00023] These and other aspects of the subject invention will become more 
readily apparent to those having ordinary skill in the art from the following detailed 
description of the invention taken in conjunction with the drawings. 

mim¥ nESCRiPTiQN of the drawings 

[00024] So that those having ordinary skill in the art will better understand how 

to make and use the overspeed limiter system of the subject invention, embodiments 

thereof will be described below with reference to the drawings wherein: 

[0002S] Fig. 1 is a schematic diagram of a fuel metering system for a turboshafl 

engine that employs a prefened embodunent of the overspeed limiter of the subject 

invention; 

[00026] Fig. 2 is a schematic diagram showing representative dual channel 
hardware voting logic, which will shut down the engine upon detectmg an overspeed 
condition; 

[00027] Fig. 2a is a cross-sectional view of a portion of the shaft for the power 
turbine having tiiree speed probes positioned adjacent thereto for detecting a shaft 
speed signal; 
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[00028] Fig. 3 is a schematic diagram showing the engine shut down logic path 
of Fig. 2, with a hardware latch; 

[00029] Fig. 4 is a schematic diagram showmg the engine shut down logic path 
and hardware latch of Fig, 3, with software test interfaces; 

[00030] Fig. 5 is a schematic diagram showing the engine shutdown logic path 
with hardware latch as shown m Fig. 3, combined with a minimum fiiel flow logic path; 

[00031] Fig. 6 is a schematic diagram showing the combined minimum fiiel flow 
logic path and engine shutdown logic path of Fig. 5, with cross-engine inhibit features; 
and 

[00032] Fig. 7 is a schematic diagram of an alternate embodiment of the two 
analog overspeed limiter lanes of protection, which include a more precise test of the 
derivative path in Lane 1, as compared to the software test interfeces of Fig. 4. 

nFTAH^RD DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[00033] The subject invention overcomes the disadvantages of prior art 
overspeed limiters used on turboshaft engines in helicopters by preferably providing 
both a mimmum flow overspeed system for low altitude operation (e.g., below 10,000 
feet) and a fiiel shutoff system for high altitude (e.g., above 10,000 feet) 
overspeed/loss-of-load conditions. 

[00034] The system of the subject invention is uniquely implemented in analog 
hardware and in the software of the primary engine control unit (ECU) to satisfy all 
certification standards for: a) the probability of loss of overspeed protection; b) the 
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probability of a false overspeed trip; and c) the probability of a single feilure causing an 
engine overspeed condition and loss of overspeed protection at the same time. 

[00035] Referring now to the drawings, wherem like reference numerals identify 
similar aspects or features of tiie subject invention, there is illustrated in Fig. 1 a 
representative fuel metering system 10 for a turboshafl engine that employs the 
overspeed limiter of the subject invention. As illustrated in Fig. 1, the fuel metering 
system 10 includes, among other things, a venturi-type jet mducer 12, which delivers 
foel under pressure to a gear pump 14. Gear pump 14 communicates with a high- 
pressure fuel filter 16. Fuel flows from filter 16 to a fiiel metering valve 18 operated by 
a stepper motor 20 with associated primary gearhead. A feedback device 22 is 
associated with the metering valve for monitoring the position of the metering valve 18. 
Feedback device 22 has associated limit switches. Also associated with the metering 
valve 1 8 is a combined DC motor, gearhead and clutch set 24, which serves as a backup 
to the stepper motor 20. 

[00036] A pressurizing and leak tight shutoflf valve 26 is in fluid communication 
with fiiel metering valve 18. It delivers fuel to the engine by way of a dual coil true 
minunum flow overspeed solenoid valve 28, which is nonnally de-energized. A fuel 
regulator valve 30 also receives filtered fiiel from filter 16. Regulator valve 30 
communicates with the jet inducer 12 and also communicates with a dual coil 
overspeed and fiiel shutoff solenoid valve 32 that is normally de-energized. Regulator 
valve 30 is also in fluid communication with fiiel metering valve 18. The fiiel shutoff 
solenoid valve 32 is also in fluid communication with the pressurizing shutoff valve 26. 
As explained m below, the overspeed limiter system of the subject invention controls 
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the operation of tfie two dual coil solenoid valves 28 and 32. During normal operating 
conditions, both solenoid valves 28 and 32 are de-energized. 

[00037] Referring now to Fig. 2, there is presented a schraiatic diagram showing 
the dual channel hardware voting logic which will shutdown the engine upon detecting 
an overspeed condition, provided that the overspeed condition is detected along two MP 
engine signal paths, a first path including a derivative signal path and a second path 
including a non-derivative engine signal path. In a preferred embodiment, the first pafli 
includes both derivative and proportional control logic while the second path includes 
proportional logic, but does not include derivative logic. 

[00038] As aiustrated, two NP engine signals (i.e,, power turbine speed signals) 
are brought mto each of the two engine control unit (ECU) channels (Channel A and 
Channel B). As shown, two Analog Overspeed Limiter Lanes of protection are 
provided for each channel. The logic for these lanes of overspeed protection have been 
identified by reference numerals 41a/43a for Channel A and reference numerals 
41b/43b for Channel B. Each ECU channel mcludes a respective shutdown coil (32a, 
32b) of fiiel shutoff solenoid 32. 

[00039] Channel A, Analog Overspeed Limiter Lane 1, identified by reference 
number 41a, includes a derivative path and it receives the engine speed signal NPeng3. 
Channel A, Analog Overspeed Limiter Lane 2, identified by reference number 43a, 
includes a non-derivative path (e.g. proportional logic) and it receives the engme speed 
signal NPEng2. Channel B, Analog Overspeed Lhniter Lane 1, identified by reference 
number 41b, includes a derivative path and it receives the engine speed signal 
NPEng2, Channel B, Analog Overspeed Limiter Lane 2, identified by reference 
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number 43b, includes a non-derivative path (e.g., proportional logic) and it receives tfie 
engine speed signal NPEngl. Fig. 2a shows tiie NP speed probe location diagram for 
engine speed signals NPEngl, NPEng2 and NPEng3, where NPEngS is shared with tiie 
cockpit. 

[00040] The hardware voting scheme of Fig. 2 ensures that: a) no single 
electrical protection system feult will result in a felse overspeed trip; and b) no single 
electrical protection system fault will result in a loss of overspeed protection. The 
hardware voting scheme depicted in Fig. 2 requires four output pins 38 for interchannel 
communication. These include two discrete inputs and two discrete outputs. The 
voting scheme will shutdown the engine under the following votes: 

[00041] NPEngl + NPEng2 = derivative path + non-derivative path 

[00042] NPEng2 + NPEng3 = derivative path + non-derivative pafli 

[00043] NPEngl + NPEng3 = derivative pafli + non-derivative path 

[00044] This voting scheme ensures that under all valid votes, one derivative and 
one non-derivative engine speed signal path lane detects an overspeed condition. It 
should be noted tiiat the disclosed control system provides high side and low side 
drivers to each of solenoids 32a and 32b. As shown, Lane #1 of Channels A and B 
control the high side drivers for solenoids 32a and 32b and Lane #2 of Channels A and 
B controls the low side drivers for each of these solenoids. 

[00045] Referring Fig. 3, there is illustrated a schematic diagram showing the 
engine shut down logic path of Fig. 2, with a hardware latch 40 interposed between tiie 
two Analog Overspeed Limiter Lanes of Channel A and tiie shutdown coil 32a of fuel 
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shutoff solenoid 32. The hardware latch includes two latches 42a, 42b in 
communication with reset logic and respective field effect transducers (FET) 46a, 46b, 
which communicate with the shutdown coil 32a of solenoid valve 32. Channel B has 
an identical hardware latch configuration. 

[00046] Referring to Fig. 4, there is illustrated a schematic diagram showing the 
engine shut down logic path and hardware latch of Fig. 3, with software test mterfeces 
50 and 52. Interface 50 is associated with input side of the two Analog Overspeed 
Limiter Lanes of Channel A. Interfece 50, for Lane 1 includes a 6.5 second self test 
window. Software test interface 52 is associated with the latch reset logic. Channel B 
has an identical software interface associated therewith. 

[00047] Referrmg to Fig. 5, there is illustrated a schematic diagram showing the 
engine shutdown logic path with hardware latch as shown in Fig. 3, combmed with a 
minimum flow logic path, for the two Analog Overspeed Limiter Lanes of Channel A. 
In this configuration, Lane 1 mcludes a derivative patii and hysterisis. The combined 
system of Fig. 5 includes software enable shutdown logic 60 which is selected only 
when: 1) at high altitude; and 2) the logic detects a loss of load signal (Npdot, Nrdot, 
Ngc, etc.). In tiiis configuration, the software enable shutdown logic 60 communicates 
witii the shutdown coil 32a of fuel shutoff solenoid 32, whUe tiie two Aiialog 
Overspeed Limiter Lanes communicate with tiie shutdown coil 32a and the minimum 
flow coil 28a of tiie true minimum flow overspeed solenoid valve 28 tiirough FETs 
62a, 62b. Channel B has identical software enable shutdown logic. It should be noted 
tiiat tixe disclosed control system provides high side and low side drivers to each of 
solenoids 28a and 28b. As shown, Lane #1 of Channiels A and B control tiie high side 
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drivers for solenoids 28a and 28b and Lane #2 of Channels A and B controls the low 
side drivers for each of these solenoids. 

[00048] Referring now to Fig. 6, there is illustrated a schenoiatic diagram showing 
the combined minimum fuel flow logic path and engine shutdown logic path of Fig. 5, 
with cross-engine inhibit features, for the two Analog Overspeed Limiter Lanes of 
Channel A. In this configuration, the software enable shutdown logic communicates 
with the shutdown coil 32a of solenoid valve 32, as in Fig. 5. The cross-engme inhibit 
logic 70 runs through nodes that arc upstream from the input node for the software 
enable shutdown logic 60, and it conununicates with the shutdown coil 32a of solenoid 
32 and the minimum flow coil 28a of solenoid 28. The cross-engine mhibit logic 70 
serves to detect when either the shutdown coil 32a or minimum flow coil 28a has been 
energized, and provides a corresponding discrete output signal to each channel of the 
opposite engines ECU. Channel B has an identical cross-engine inhibit logic 
arrangement. 

[00049] Referring to Fig. 7, there is illustrated a schematic diagram of an 
alternate embodiment of the two Analog Overspeed Limiter Lanes of Channel A. This 
circuit provides a more precise test of the derivative path in Lane 1, as compared to the 
softwarc test interfeces of Fig. 4. Channel B has an identical arrangement 
[00050] Although the subject invention has been described with respect to 
prefened embodiments, those skilled m the art will readUy appreciate that changes and 
modifications may be made thereto without departing from the spirit and scope of the 
subject uivention as defined by the appended claims. 
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WHAT IS CLAIMED IS; 

1 . A control system for a turboshaft engine comprising: 

a) means for providing a desired minimum fuel flow to the engine 
when an overspeed condition is detected and when the engine is operating in a first 
operating range; and 

b) means for shutting off fuel flow to the engine when an overspeed 
condition is detected and the engine is operating in a second operating range. 

2. A control system as recited in claim 1, wherein in the first operating 
range the engine is operating at a relatively low altitude and in the second operating 
range the engine is operating at a relatively high altitude. 

3 . A control system as recited in claim 2, wherein the relatively low 
altitude includes 0 to 10,000 feet above sea level and the relatively high altitude 
exceeds 10,000 feet above sea level 

4. A control system as recited in claim 1, wherein an overspeed condition 
is detected along two different control logic paths, a first logic path which includes 
derivative and non-derivative control logic and a second logic path which mcludes non- 
derivative logic. 

5. A control system as recited in claim 4, wlierein the non-derivative logic 
includes proportional logic. 
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6. A control system as recited in claim 1, further comprising a hardware 
latch having reset logic associated therewith. 

7. A control system as recited in claim 1, further comprising software test 
mterfaces for testing the performance of the control system. 

8. A control system as recited in claun 1, wherein the means for providing 
a desired minimum fiiel flow to the engine when an overspeed condition is detected 
includes a first solenoid valve and the means for shutting off fuel flow to the engine 
when an overspeed condition is detected includes a second solenoid valve. 

9. A control system as recited in claim 1, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 

10. A control system as recited in claim 1, wherein the system is a dual 
channel system havmg an interchaimel communication means for ensuring that a feult 
in one chaimel of the system will not shut down the control system. 

11. A control system as recited in claim 1, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 
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12. A control system for a turboshaft engine comprising means for shutting 
off fuel flow to the engine when an overspeed condition is detected, wherein the 
overspeed condition is detected by first and second control logic paths, the first path 
including a derivative path and a non-derivative path and tiie second path includmg a 
non-derivative path. 

13. A control system as recited in claim 1, further comprising means for 
disabling tiie means for shutting off fuel flow to the engine when an overspeed 
condition when the engine is operating below an altitude of 10,000. 

14. A control system for a turboshaft engine comprising: 

a) means for proving a mimmum fuel flow to the engine when an 
overspeed condition is detected in a first operating range; and 

b) means for shutting off fuel flow to the engine when an overspeed 
condition is detected m a second operating range, provided that the overspeed condition 
is detected along two different engine speed signal paths, including a derivative path 
and a non-derivative path. 

15. A control system as recited in claim 14, wherein in the Burst operating 
range the engine is operating at a relatively low altitude and in the second operating 
range tiie engine is operating at a relatively high altitude. 
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16. A control system as recited in claim 15, wherein the relatively low 
altitude includes 0 to 10,000 feet above sea level and the relatively high altitude 
exceeds 10,000 feet above sea level. 

17. A control system as recited m claim 14, wherein the derivative pafli 
include derivative and proportional control logic and the non-derivative path includes 
proportional logic. 

18. A control system as recited in claim 14, further comprising a hardware 
latoh having reset logic associated therewitti. 

19. A control system as recited in claim 14, further comprising software test 
inter&ces for testing the performance of the control system. 

20. A control system as recited in claim 14, wherein the means for providing 
a desired minimum fuel flow to the engine when an overspeed condition is detected 
includes a first solenoid valve and the means for shutting off fuel flow to the engine 
when an overspeed condition is detected includes a second solenoid valve. 

21. A control system as recited in claim 14, wherein an overspeed condition 
is detected based on at least one of a power turbine speed signal, a gas generator speed 
signal and main rotor speed signal. 



-16. 



wo 2005/119012 



PCT/US2005/019699 



22. A control system as recited in claim 14, wherein the system is a dual 
channel system having an interchannel communication means for ensuring that a fault 
in one channel of the system will not shut down the control system. 

23. A method for limiting turboshaft engine overspeed comprising the steps 

of: 

a) measuring at least one engme speed parameter; 

b) sensing the altitude at which the engine is operating; 

c) determining whether an overspeed condition exists based on the 
measured speed parameter usmg a control system which includes a first logic path 
having derivative and non-derivative control logic and a second logic patii havmg non- 
derivative logic; 

d) providmg a desired minimum fuel flow to the engine when an overspeed 
condition is detected by the engine control system when the engine is operating in a 
first altitude range; and 

e) shutting off fuel flow to the engine when an overspeed condition is 
detected by the engme control system and the engine is operating in a second operatmg 
range. 
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